Behavioral task
behavioral1
Sample
NEAS.bf5f061ac00fcf9506ec42b4dee98f20_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.bf5f061ac00fcf9506ec42b4dee98f20_JC.exe
-
Size
1.6MB
-
MD5
bf5f061ac00fcf9506ec42b4dee98f20
-
SHA1
d75b025184f5e0fd9322f8f1a5592e6ea467f0fb
-
SHA256
3d0b522bcaf0392445a832a922f7263505260176d4a72edc31996c7d3714f3d9
-
SHA512
96a1f428ab2f28abac06731381d1adb7a208a8cca528364c6cf59202b3976f9dea9af5d16ce1aa5c2cbc7d2bbf6bc7f1d65888e4c5d2648d1d050b8c6a24c1e8
-
SSDEEP
49152:ac2WX2fjIjiQh6zRF/nVSrw6ewcXJqIlFo:aXWmfjOiO8RF/VSrw6ewcXJ3l+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bf5f061ac00fcf9506ec42b4dee98f20_JC.exe
Files
-
NEAS.bf5f061ac00fcf9506ec42b4dee98f20_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE